Strange noise from computer.

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

snteran

Thread Starter
Joined
Jan 10, 2006
Messages
90
I recently got a new Dell GX-520 with W2K. It's a great box, but I have started hearing these strange noises that sounds like a door bell and then another that sounds like a ray gun blast. They happen throughout the day. I found out that if I do a flushdns that they stop for awhile but later on start up again. The sounds are just a bleep of a sound, not that long, they seem like some to of ping or pulse. Not sure how to trace or prevent from happening. Any thoughts, advice would be greatly appreciated.

Serge
 
Joined
Jan 10, 2006
Messages
18
If i where you id open up your box and have a look inside, locate the problem and reply back, there aint much you can do about a random noise.
Out of interest what does a ray gun blast sound like?
 
D

Deletedmember81584

It sounds like a simple virus. I have seen viruses like this that are quite harmless and depending where you go in the net they get downloaded. It may be as simple as that. I would try running adaware/spybot and see what it finds. Did you buy this box from the store or someone selling theirs? Maybe it was already on there.

Just my thoughts. Good luck & let us know what happens.
 
Joined
Jan 10, 2006
Messages
115
I'm not quite sure if those sounds are from your PC or from Windows according to your documentation. However, sounds like it's from Windows.

First, I would suggest that you put the Windows Default Sound scheme. Somebody might have put some weird sounds there.

Second, if the problem still persists, I would run an anti-spyware software like SpyBot or Ad-Aware to make sure nothing's weird is happening behind the scenes.

Good luck !
 

snteran

Thread Starter
Joined
Jan 10, 2006
Messages
90
I'll run adware and spybot. I bought the computer straight from Dell, and I don't do a whole lot of surfing. I'll report back any findings.

Thanks,

Serge

BTW - Blast gun sound is more of an old school sound, think the Jetsons!
 

snteran

Thread Starter
Joined
Jan 10, 2006
Messages
90
Please let me know if more information is needed:

Logfile of HijackThis v1.99.1
Scan saved at 12:38:27 PM, on 1/10/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\AMP\Apache2\bin\Apache.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\WINNT\system32\cba\pds.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\AMP\MYSQL\bin\mysqld-nt.exe
C:\PROGRA~1\Symantec\SYMANT~1\NSCTOP.EXE
C:\WINNT\system32\regsvc.exe
C:\AMP\Apache2\bin\Apache.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ams_ii\hndlrsvc.exe
C:\WINNT\system32\MsgSys.EXE
C:\WINNT\system32\ams_ii\iao.exe
C:\WINNT\system32\cba\xfr.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\hkcmd.exe
C:\WINNT\system32\igfxpers.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINNT\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\AMP\Apache2\bin\ApacheMonitor.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE
C:\WINNT\System32\SCardSvr.exe
C:\WINNT\system32\WISPTIS.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Gaim\gaim.exe
C:\Program Files\Symantec\pcAnywhere\WINAW32.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Windows Media Player\wmplayer.exe
C:\tools\hijack\HijackThis.exe


O1 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O1 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O1 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINNT\system32\dla\tfswshx.dll
O1 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - Toolbar: @msdxmLC.dll,[email protected],&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O2 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O3 - HKLM\..\Run: [IgfxTray] C:\WINNT\system32\igfxtray.exe
O3 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exe
O3 - HKLM\..\Run: [Persistence] C:\WINNT\system32\igfxpers.exe
O3 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O3 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O3 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O3 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O3 - HKLM\..\Run: [dla] C:\WINNT\system32\dla\tfswctrl.exe
o3 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
o3 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
o3 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
o3 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
o3 - Global Startup: Monitor Apache Servers.lnk = C:\AMP\Apache2\bin\ApacheMonitor.exe
o3 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
o4 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
o5 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
o6 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
o6 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
o6 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
o6 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
o6 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
o7 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1132782663992
o7 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://knsi.webex.com/client/v_mywebex-t20/training/ieatgpc.cab
o8 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxdev.dll
o8 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll
o8 - Winlogon Notify: PCANotify - C:\WINNT\SYSTEM32\PCANotify.dll
o9 - Service: Apache2 - Unknown owner - C:\AMP\Apache2\bin\Apache.exe" -k runservice (file missing)
o9 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
o9 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
o9 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
o9 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
o9 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
o9 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
o9 - Service: Intel Alert Handler - Intel® Corporation - C:\WINNT\system32\ams_ii\hndlrsvc.exe
o9 - Service: Intel Alert Originator - Intel® Corporation - C:\WINNT\system32\ams_ii\iao.exe
o9 - Service: Intel File Transfer - Intel® Corporation - C:\WINNT\system32\cba\xfr.exe
o9 - Service: Intel PDS - Intel® Corporation - C:\WINNT\system32\cba\pds.exe
o9 - Service: MySQL - Unknown owner - C:\AMP\MYSQL\bin\mysqld-nt".exe (file missing)
o9 - Service: Symantec System Center Discovery Service (NSCTOP) - Symantec Corporation - C:\PROGRA~1\Symantec\SYMANT~1\NSCTOP.EXE
o9 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
o9 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
o9 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
 

snteran

Thread Starter
Joined
Jan 10, 2006
Messages
90
I ran spybot and removed all cookies and also found two registry entries.
1. comet cursors
2. DSO Exploit

I have not heard the noises since I removed all items. Could have been the issue. Will monitor and post as new events occur.

Thanks,
 

~Candy~

Retired Administrator
Joined
Jan 27, 2001
Messages
103,706
I believe comet cursors do make strange noises.

Let me see who I can find to look at your log.
 

Cheeseball81

Retired Moderator
Joined
Mar 3, 2004
Messages
84,315
Overall the log isn't bad.

Rescan with Hijack This.
Close all browser windows except Hijack This.
Put a check mark beside these entries and click "Fix Checked".

o6 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm

o6 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm


Reboot.

It sounds like your SpyBot might be outdated. What version are you using?

I could never stand Comet Cursor, in my opinion it's a very big nuisance.
 

snteran

Thread Starter
Joined
Jan 10, 2006
Messages
90
I'm running Spybot 1.3 .1TX
I was going to install Adware as well. I'll close all apps/windows and run hijack and report back.

thanks,
 

snteran

Thread Starter
Joined
Jan 10, 2006
Messages
90
So far so great, I updated spybot and ran and removed another 17 items. Things seem to be fine. anything else, I will post.

Thanks,
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Top